Skip to content

feat(vm): run the supervisor outside the guest workload - #2945

Open
drew wants to merge 6 commits into
codex/1737-rfc12-supervisor-modesfrom
codex/vm-host-supervisor
Open

feat(vm): run the supervisor outside the guest workload#2945
drew wants to merge 6 commits into
codex/1737-rfc12-supervisor-modesfrom
codex/vm-host-supervisor

Conversation

@drew

@drew drew commented Aug 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Summary

Adopt the RFC 0012 supervisor/sandbox split in the VM driver. The guest runs openshell-sandbox as the workload boundary while the host runs openshell-supervisor; a private vsock path is the only guest-to-host control and mediated-network channel.

Related Issue

Part of #1737.

Changes

  • Boot the guest with the sandbox runtime and protected boundary bootstrap material.
  • Launch and supervise the external host supervisor with durable completion and restart state.
  • Use vsock for authenticated lifecycle, exec, TCP, and DNS traffic.
  • Remove guest NIC, TAP, gvproxy, nftables, and direct guest egress dependencies.
  • Harden embedded runtime caching and native supervisor build/package paths.
  • Keep host-side gateway, provider, and upstream network access outside the guest workload.

Testing

  • mise run pre-commit passes
  • Full VM E2E validation delegated to remote CI

Checklist

  • Follows Conventional Commits
  • Authored commits are signed off (DCO)

Stack

  1. feat(isolation): define the RFC 0012 boundary contract #2941 — contract
  2. feat(isolation): add boundary protocol and Linux primitives #2942 — shared interface and primitives
  3. feat(isolation): split supervisor and sandbox runtimes #3151 — supervisor and sandbox runtimes
  4. feat(vm): run the supervisor outside the guest workload #2945 — VM driver (this PR)
  5. feat(docker): isolate workloads behind the host supervisor #2965 — Docker driver
  6. feat(kubernetes): add proxy-pod isolation topology #3144 — Kubernetes proxy-pod topology
  7. feat(podman): isolate workloads behind the host supervisor #3230 — Podman driver
  8. perf(isolation): add TCP and DNS benchmark harnesses #3229 — performance harnesses

@copy-pr-bot

copy-pr-bot Bot commented Aug 26, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@github-actions

github-actions Bot commented Aug 26, 2026

Copy link
Copy Markdown

🌿 Preview your docs: https://nvidia-preview-pr-2945.docs.buildwithfern.com/openshell

@drew
drew force-pushed the codex/vm-host-supervisor branch from 4a8f295 to 532fa1b Compare August 26, 2026 07:08
@drew
drew changed the base branch from codex/rfc-0012-impl-base to codex/1737-rfc12-supervisor-primitives August 26, 2026 07:09
@drew
drew force-pushed the codex/vm-host-supervisor branch from 532fa1b to 02e80eb Compare August 26, 2026 08:50
@drew drew changed the title feat(vm): move supervisor outside guest boundary feat(isolation): prototype host-supervised VM and Docker boundaries Aug 26, 2026
@drew
drew force-pushed the codex/vm-host-supervisor branch from 7e10ae3 to 02e80eb Compare August 26, 2026 19:41
@drew drew mentioned this pull request Aug 26, 2026
Open
4 tasks
@drew drew changed the title feat(isolation): prototype host-supervised VM and Docker boundaries feat(vm): move supervisor outside guest boundary Aug 26, 2026
@drew
drew force-pushed the codex/vm-host-supervisor branch from 02e80eb to be91699 Compare September 1, 2026 00:13
@copy-pr-bot

copy-pr-bot Bot commented Sep 1, 2026

Copy link
Copy Markdown

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

This was referenced Sep 1, 2026
Open
Open
@drew
drew force-pushed the codex/vm-host-supervisor branch from be91699 to 273655b Compare September 1, 2026 08:00
@drew
drew force-pushed the codex/vm-host-supervisor branch from 273655b to f7c163d Compare September 1, 2026 08:06
@drew drew mentioned this pull request Sep 2, 2026
Open
4 tasks
@drew
drew force-pushed the codex/vm-host-supervisor branch from 0c5cd41 to 9291888 Compare September 3, 2026 01:45
@drew drew mentioned this pull request Sep 3, 2026
Open
4 tasks
@drew
drew marked this pull request as ready for review September 3, 2026 01:46
@drew
drew requested review from a team, derekwaynecarr, mrunalp and sjenning as code owners September 3, 2026 01:46
@drew
drew changed the base branch from codex/1737-rfc12-supervisor-primitives to codex/1737-rfc12-supervisor-modes September 3, 2026 01:46
@drew drew changed the title feat(vm): move supervisor outside guest boundary feat(vm): adopt shared supervisor boundary mode Sep 3, 2026
@drew
drew force-pushed the codex/vm-host-supervisor branch from fd784d6 to 36d8ef7 Compare September 3, 2026 14:34
@drew drew added the test:e2e Requires end-to-end coverage label Sep 3, 2026
@drew

drew commented Sep 5, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

8 similar comments
@drew

drew commented Sep 5, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew

drew commented Sep 6, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew

drew commented Sep 6, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew

drew commented Sep 6, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew

drew commented Sep 6, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew

drew commented Sep 6, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew

drew commented Sep 6, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew

drew commented Sep 6, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew
drew force-pushed the codex/vm-host-supervisor branch from 5484b30 to 525cb9c Compare September 8, 2026 22:32
@drew drew changed the title feat(vm): adopt shared supervisor boundary mode feat(vm): run the supervisor outside the guest workload Sep 8, 2026
@drew drew mentioned this pull request Sep 8, 2026
Open
5 tasks
@drew
drew force-pushed the codex/vm-host-supervisor branch from 525cb9c to 052a170 Compare September 8, 2026 22:40
@drew
drew force-pushed the codex/vm-host-supervisor branch from 052a170 to 63bc8bb Compare September 9, 2026 04:39
@drew drew mentioned this pull request Sep 9, 2026
Open
5 tasks
@drew
drew removed this pull request from stack #3152 September 9, 2026 04:42
@drew
drew added this pull request to stack #3231 September 9, 2026 04:42
@drew
drew force-pushed the codex/vm-host-supervisor branch from 63bc8bb to 26e7f16 Compare September 9, 2026 04:53
drew added 5 commits September 8, 2026 22:14
@drew
feat(vm): run the supervisor outside the guest workload
54f2e53 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
fix(vm): demote host supervisors and protect staging paths
d6b82c5 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
refactor(vm): use the single authenticated grpc transport
c3ccbef 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
fix(vm): adapt rootfs fixture to host supervisor
7c396d0 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
fix(vm): preserve fallible supervisor command API
c6e19b6 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
drew force-pushed the codex/vm-host-supervisor branch 2 times, most recently from 806615c to a43076b Compare September 9, 2026 05:38
@drew
test(vm): make security checks portable
8355238 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
drew force-pushed the codex/vm-host-supervisor branch from a43076b to 8355238 Compare September 9, 2026 05:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mrunalp mrunalp Awaiting requested review from mrunalp mrunalp is a code owner
@sjenning sjenning Awaiting requested review from sjenning sjenning is a code owner
@derekwaynecarr derekwaynecarr Awaiting requested review from derekwaynecarr derekwaynecarr is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

test:e2e Requires end-to-end coverage

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@drew